What is CVE-2026-58058?

CVE-2026-58058 is a medium-severity vulnerability in Nmap, classified under Integer Underflow. CVSS score: 6.5/10. Published 2026-06-28.

How severe is CVE-2026-58058?

Medium severity. CVSS v3 base score is 6.5 out of 10.

Integer overflow in Nmap

CVE-2026-58058

Nmap through 7.99 does not keep the IPv6 extension-header walk within the captured packet in ipv6_get_data_primitive (libnetutil/netutil.cc), so the pointer advances past the buffer and the remaining-length computation underflows to a larg…

CVSS v3 metric

CVSS v3 base score 6.5 (Medium). Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:L.

Affected products

Nmap — versions 0

Weakness classification (CWE)

CWE-191 — Integer Underflow

References

disclosure@vulncheck.com (exploit, third-party-advisory)
disclosure@vulncheck.com (patch)
disclosure@vulncheck.com (release-notes)
disclosure@vulncheck.com (third-party-advisory)

Frequently asked questions

What is CVE-2026-58058?: CVE-2026-58058 is a medium-severity vulnerability in Nmap, classified under Integer Underflow. CVSS score: 6.5/10. Published 2026-06-28.
How severe is CVE-2026-58058?: Medium severity. CVSS v3 base score is 6.5 out of 10.